[squid-users] oddity with squid 3.3.2 and https

2013-04-15 Thread Brett Lymn
I have just updated our proxies to squid 3.3.2 running on rhel 5.8, mostly this went smoothly apart from some access to https. As a rule our proxies authenticate users using kerberos but there some special sites that are allowed access to without authentication. When accessing a https site

Re: [squid-users] Plain HTML site not opening through squid.

2013-04-15 Thread Warren Baker
On Mon, Apr 15, 2013 at 7:00 AM, Vivek Sharma vi...@hqr.drdo.in wrote: I am facing this weird problem while trying to open a site mkm.drdo.gov.in = using squid 3.1.10. While the site works fine bypassing squid. While using squid - I am getting Zero Sized Reply on the client browser w=

Re: [squid-users] Need help on SSL bump and certificate chain

2013-04-15 Thread Alex Rousskov
On 04/14/2013 11:44 PM, Prasanna Venkateswaran wrote: Can someone please help me out here? In a nutshell, I am using a proper signed certificate(not self signed) to generate certificates. The chain is my certificate - intermediate CA - root CA. The root certificate is still a fake

[squid-users] squid code

2013-04-15 Thread Saad Ahmed
where is socket listen bind accept response from client to server written in squid ? please tell me filename and function? In tproxy mode

[squid-users] Squid without cache and high CPU usage

2013-04-15 Thread mkeram
Hello, I'm using Squid 2.9 stable7 as transparent proxy on Debian 6.0. I have 3 links to 3 ISPs. For now I have max 50mbits squid traffic for 200 users. Users are assigned to proper IP class and each class to proper link to ISP. Traffic is logged not cached on disk. I don't need anything else.

Re: [squid-users] Plain HTML site not opening through squid.

2013-04-15 Thread Squidblacklist
On Mon, 15 Apr 2013 10:30:16 +0530 Vivek Sharma vi...@hqr.drdo.in wrote: I am facing this weird problem while trying to open a site mkm.drdo.gov.in = using squid 3.1.10. While the site works fine bypassing squid. While using squid - I am getting Zero Sized Reply on the client browser w=

Re: [squid-users] squid code

2013-04-15 Thread Amos Jeffries
On 16/04/2013 6:59 a.m., Saad Ahmed wrote: where is socket listen bind accept response from client to server written in squid ? please tell me filename and function? In tproxy mode What are you trying to do? Amos

Re: [squid-users] oddity with squid 3.3.2 and https

2013-04-15 Thread Amos Jeffries
On 15/04/2013 7:22 p.m., Brett Lymn wrote: I have just updated our proxies to squid 3.3.2 running on rhel 5.8, mostly this went smoothly apart from some access to https. As a rule our proxies authenticate users using kerberos but there some special sites that are allowed access to without

Re: [squid-users] Squid without cache and high CPU usage

2013-04-15 Thread Amos Jeffries
On 16/04/2013 7:44 a.m., mkeram wrote: Hello, I'm using Squid 2.9 stable7 as transparent proxy on Debian 6.0. I have 3 links to 3 ISPs. For now I have max 50mbits squid traffic for 200 users. Users are assigned to proper IP class and each class to proper link to ISP. Traffic is logged not

Re: [squid-users] oddity with squid 3.3.2 and https

2013-04-15 Thread Brett Lymn
On Tue, Apr 16, 2013 at 04:16:49PM +1200, Amos Jeffries wrote: The user_rewrite.pl script just strips off the ntlm/kerberos bits in front of the username so the upstream security device sees a username it understands. I put the ACL on the never_direct because it is a slow ACL evaluation and